Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/g78z3WTG-8c4vpVsdNu8coU4-Ks.roa
File: g78z3WTG-8c4vpVsdNu8coU4-Ks.roa (raw, json)
Hash identifier: ttVpVll7zxrHGjk71YOHrLiqWx/La4fV1pWTvSFoNfI=
Subject key identifier: 83:BF:33:DD:64:C6:FB:C7:38:BE:95:6C:74:DB:BC:72:85:38:F8:AB
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 018AD200938564C887E19F37CB824D205D95
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/g78z3WTG-8c4vpVsdNu8coU4-Ks.roa
Signing time: Tue 26 Sep 2023 14:59:27 +0000
ROA not before: Tue 26 Sep 2023 14:59:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 207252
IP address blocks: 2a10:cc40:270::/44 maxlen: 48
2a10:cc40:270::/48 maxlen: 48
2a0e:b107:1199::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 17 Oct 2023 20:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:d2:00:93:85:64:c8:87:e1:9f:37:cb:82:4d:20:5d:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Sep 26 14:59:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=83bf33dd64c6fbc738be956c74dbbc728538f8ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:a2:f2:6f:5c:b1:ce:24:14:9b:e5:a7:d8:ce:
e6:10:42:58:22:f1:74:d3:cb:d9:ed:39:ab:aa:65:
08:93:c1:81:d7:a8:bd:24:50:48:24:0a:b8:64:89:
ac:e0:a7:c6:af:c5:05:aa:59:01:fd:04:84:53:32:
22:a3:6d:52:54:16:e7:c7:db:ea:e2:ce:eb:9b:80:
64:b3:af:2c:4b:ed:03:6d:5b:7e:01:2c:28:37:a5:
2e:bd:ba:36:bc:d9:05:bc:e8:2f:84:3a:04:c2:58:
4b:e7:4c:53:c8:72:e2:d4:d3:fd:85:43:a4:06:f8:
0b:62:b6:eb:45:8a:cb:bb:2d:ac:26:28:c7:46:95:
b1:b5:94:cd:0c:0e:ee:cf:4d:6d:f0:00:ca:9c:8b:
b5:31:68:fd:25:de:2b:88:f6:d5:8a:ee:aa:48:0e:
88:dd:06:a9:32:e5:20:07:22:17:46:b3:2f:5c:a4:
03:4b:e7:28:cb:2c:67:8d:60:d7:ce:fe:6c:79:68:
8c:b1:c8:f9:dd:da:81:43:ea:ac:56:0b:59:ad:a8:
b4:77:d8:da:0c:1b:bf:68:13:9c:85:1d:93:e3:b4:
4b:a0:89:e1:f6:af:76:c4:fd:f9:57:f2:65:2e:e1:
e1:b5:3c:3e:9b:32:35:e9:56:27:a7:94:db:1f:8a:
c0:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:BF:33:DD:64:C6:FB:C7:38:BE:95:6C:74:DB:BC:72:85:38:F8:AB
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/g78z3WTG-8c4vpVsdNu8coU4-Ks.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:b107:1199::/48
2a10:cc40:270::/44
Signature Algorithm: sha256WithRSAEncryption
0f:f7:69:92:1c:18:7a:9d:d0:e2:c0:d3:c0:7c:18:40:87:77:
03:7f:c8:47:c5:6c:d5:d6:60:27:bb:01:57:eb:2a:df:83:37:
98:10:0d:84:4a:dc:e7:2f:84:fd:48:f3:a2:52:69:e5:63:ff:
aa:91:04:52:ff:24:18:e3:c1:98:b5:1b:83:89:c6:69:67:34:
4f:1c:ed:81:81:86:78:6d:6f:fc:bd:9c:eb:ca:df:39:57:f8:
0e:a6:c8:5f:8b:cb:dc:a3:ac:fe:91:9e:1a:55:ba:49:12:a5:
28:fc:b6:7a:e4:19:9e:c8:e6:de:5f:07:a8:89:9a:fc:70:2a:
06:1b:3a:bf:22:95:53:f0:86:3b:17:17:4a:83:8c:c4:d0:82:
d6:56:45:d2:12:d4:62:55:ca:04:f5:6c:93:75:9d:c1:a8:5c:
d1:38:a7:e7:3e:03:28:2b:7d:2a:16:f5:ea:eb:2b:67:f0:66:
88:09:e1:0d:2d:fc:24:05:7b:85:53:b2:6c:c4:00:6b:7e:4b:
98:0f:75:c1:2e:b4:d8:a0:1b:c0:0e:90:58:e8:c2:00:ef:29:
c2:76:76:3f:1d:c6:61:db:df:cb:ab:bb:27:f9:25:37:e7:de:
88:96:69:29:c8:ef:93:b1:8e:5e:fc:0c:29:34:09:53:85:73:
c3:7e:30:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:29:35 2024 by rpki-client on console-fra.rpki-client.org